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Abstract 

NASA is reviewing various propulsion technolo- 
gies for exploring space. This paper examines the 
requirements for one enabling propulsion technology: 
Integrated Controls and Health Monitoring (ICHM) 
for Chemical Transfer Propulsion (CTP) . Functional 
requirements for a CTP-ICHM system are proposed 
from tentative mission scenarios, vehicle config- 
urations, CTP specifications, and technical feasi- 
bility. These CTP-ICHM requirements go beyond 
traditional reliable operation and emergency shutoff 
control to include (1) enhanced mission flexibility, 
(2) continuously variable throttling, (3) tank-head 
start control, (4) automated prestart and post- 
shutoff engine check, (5) monitoring of space 
exposure degradation, and (6) product evolution 
flexibility. Technology development plans are also 
discussed. 

Int roduct ion 

Before a lunar base can be built as a stepping 
stone to Mars, new space vehicles must be developed. 
These vehicles will be space based, reusable, human 
rated, and continuously throttleable. The candidate 
baseline propulsion for these vehicles is a cryo- 
genic hydrogen-oxygen expander-cycle rocket engine, 
referred to as the ‘'Chemical Transfer Propulsion" 
(CTP) engine. 

Because these engines must perform a number of 
different mission duties, including lunar descent, 
and because they must perform repeatedly and relia- 
bly with less maintenance support than existing 
flight-proven technology, a substantial control and 
health-monitoring system is required for these 
engines. Integrated Controls and Health Monitoring 
(ICHM) technology is being investigated to provide 
these features for CTP engines. The goals of the 
ICHM system are to ensure engine reliability, 
reduce or eliminate the need for in-space inspec- 
tion and maintenance, and provide the required mis- 
sion flexibility. 

New technologies have emerged which can be 
applied to CTP-ICHM designs. Advanced miniaturized 
sensors, fiber optics, artificial intelligence, 
expert systems, neural networks, and advanced rocket 
engine modeling make more sophisticated monitoring 
and control systems feasible. 

One of the challenges presently facing the 
application of these emerging technologies to a 
CTP-ICHM system is the fact that the system require- 
ments and technological feasibility are uncertain. 

To date, the correlation between ICHM requirements 


and the specific missions, vehicles, and transporta- 
tion infrastructure has not been sufficiently 
defined to specify the CTP-ICHM system for the 
lunar missions. Furthermore, the capabilities of 
the emerging technologies have not been adequately 
demonstrated in rocket engine systems to allow the 
optimum ICHM system technology to be selected. 

This paper addresses this challenge by first 
comparing the present mission plans with general 
ICHM requirements and then highlighting possible 
tradeoffs. Because the lunar missions and their 
associated vehicles will precede the Martian mis- 
sions, this paper focuses on the lunar missions. 

On the basis of the likely mission requirements, 
CTP-ICHM minimum and growth features are proposed 
to distinguish between enabling and enhancing- 
evolving capabilities. Continuing efforts to fur- 
ther refine these features into a CTP-ICHM system 
definition are described along with recommendations 
for future studies to identify the optimum mix of 
ICHM features and mission, infrastructure, and vehi- 
cle features. Recommendations for future work to 
advance the appropriate ICHM technology are also 
presented . 

Mission-Driven R e qui rements 

One lunar mission being considered would use 
two types of space-based, reusable vehicles: a 

lunar transfer vehicle (LTV) and a lunar excursion 
vehicle (LEV) ("Space Transfer Vehicle Concepts and 
Requirements Quarterly Progress Presentations,’ 

NASA Contract NAS8 r 37856. Martin Marietta Corp.; 
and "Space Transfer Vehicle Concepts and Require- 
ments Quarterly Progress Presentations," NASA 
Contract NAS8-37855, Boeing Aerospace Co.). The 
LTV’ s would ferry payload and crew between low- 
Earth orbit (LEO) and lunar orbit. They would make 
the initial delivery of LEV’S into lunar orbit and 
subsequent deliveries of LEV propellant. The 
LEV’S would ferry payload and crew between lunar 
orbit and the lunar surface. 

Vehicle concepts and performance requirements 
have been identified by various studies (Martin 
Marietta and Boeing Aerospace reports and Refs. I 
and 2) and continue to be revised and refined. A 
representative vehicle configuration is shown in 
Fig. 1. Corresponding engine requirements are 
listed in Table I . 

According to these plans, the engines will 
encounter a greater variety of duties and a more 
hostile base and operating environment than any pre- 
vious rocket engine, thus requiring control and mon- 
itoring systems that are unprecedented in rocket 


technology. The ICHM system must satisfy these 
requirements in addition to meeting the traditional 
goals of reliable operation and emergency shutdown 
fault response. The requirements that need to be 
quantified in order to guide the configuration and 
development of the CTP-ICHM system for the lunar 
missions are summarized in Table II. General ICHM 
features to meet the mission requirements are 
described next . 

Space-Based Operation 


Presently, such start modes and 10:1 throt- 
tling are considered feasible for expander-cycle 
engines, 3 The estimated maximum t ime-rate-of- 
change for throttling is 10 to 100 percent in 
4 sec, 100 to 10 percent in 3 sec, and 10 percent 
changes in 0,3 sec (video conference between 
Aerojet TechSys terns’ Expander Cycle Engine and 
Instrumentation group and MASA Lewis Research Cen- 
ter’s Space Vehicle Propulsion Branch, Sacramento, 
CA, and Cleveland, OH, Dec. 20, 1989). Such sub- 
stantial throttling requires closed-loop control. 


Space-based operation imposes the following 
three constraints: zero gravity, limited support 

facilities, and space hazards exposure. In addi- 
tion to these three constraints, the consequences 
of a failure in the isolation of space compel the 
use of dependable vehicles and reliable failure pre- 
diction. Zero-gravity operation requires engine 
pumps that are capable of starting from tank-head 
pressure. Limited facility support necessitates 
built-in engine checks to verify the engine's opera- 
tional integrity. Manual inspections cannot be per- 
formed prior to every engine start (in lunar orbit, 
for example). Checkout operations, such as prefir- 
ing the engine, may also be impractical because of 
the difficulty of ensuring that the vehicle remains 
in a safe orbit in the event of an anomalous start. 
Some degree of prestart readiness verification 
must, therefore, be built into the engine. Because 
the engines will be stored in space for extended 
periods of time, the engine and ICHM system must 
survive degradation from exposure to numerous space 
hazards such as space debris, monatomic oxygen, and 
radiation . 


Product Evolution 


During the product life of LTV’s and LEV's, 
alternative missions and improvements in technology 
will arise. To accommodate these changes, since 
"developing a score of specialized vehicles is not 
feasible, "2 product improvement flexibility must be 
designed in by "using common vehicle systems and 
subsystems where possible. "2 This requires a 
greater degree of modularity than is presently used. 


Mission and Techn ol o gy Tradeoffs 

The specific missions, vehicles, and support- 
ing infrastructure definitions will alter the 
specific ICHM requirements. Conversely, the feasi- 
bility and cost of ICHM features will affect the 
mission, vehicle, and infrastructure options. Many 
of the previously discussed CTP and ICHM require- 
ments can be eliminated or substantially reduced by 
increasing the capabilities of the vehicles or 
infrastructure. Some examples of these tradeoffs 
follow: 


Reusable Engines 

The specification of reusable engines imposes 
several requirements: sustained reliability wi th- 

ou t major service, built-in engine diagnostics, 
tolerance to long-duration space exposure, mission- 
to-mission control flexibility, and (possibly) 
engine life prediction. 

The requirement of multiple flights without 
major service might increase the difficulty of sus- 
taining human-rated reliability. In the absence of 
manual inspection facilities, the engine diagnos- 
tics would have to be built in and presumably per- 
formed between flights. Spaced-based engines with 
long operational lives would face increased expo- 
sure to space hazards. Because one engine and vehi- 
cle configuration would be used for many mission 
duties, the engine controller would have to accommo- 
date multiple thrust-versus-time profiles and, pos- 
sibly, different levels of critical reliability. 
Because it is potentially more economical to use 
the engines to the limit of their service life, it 
is highly desirable to be able to predict the 
remaining life of an engine on the basis of meas- 
ured parameters . 

Deep-Throttling Engines 

It is estimated that lunar descent maneuvering 
will require a throttling range of at least 10:1 
(100 to 10 percent of maximum thrust) and could 
require as much as a 20 :i span of continuously vari- 
able, on-deraand, thrust control. The required time- 
rate-of-change of this throttling is, at present, 
unknown. In addition to descent throttling, basic 
expander-cycle startup involves tank-head-idle and 
pumped-idle operation. 


Vehicle Tradeoffs (for both LTV and LEV) 

The performance of a vehicle is a composite of 
ail its systems. With respect to propulsion, the 
complementary vehicle systems are the main engines 
and the vehicle's auxiliary or attitude control pro- 
pulsion. The degree to which each of these systems 
contribute to the vehicle’s total propulsion per- 
formance is subject to tradeoff analyses. More spe- 
cific examples of CTP-ICHM tradeoff issues follow; 

(1) Thrust control accuracy versus more sub- 
stantial attitude control propulsion 

(2) Control flexibility (throttling and gim- 
balling) versus more substantial auxil- 
iary propulsion capable of compensating 
for an engine-out situation 

(3) Control flexibility (nozzle position and 
thrust/time control) versus vehicle aero- 
brake methods 

(4) Mixture ratio control accuracy versus con- 
tingency propellant 

Space-Basing Tradeoffs 

(1) Built-in engine sel f- i nspec t ion versus 
comprehensive, external, in-space inspec- 
tion facilities available at all mission 
nodes: including inspection tools (plume 
spectrometers; optical leak detectors; 
and probes for inspecting injectors, cham- 
ber, and nozzle), astronaut time, service 
robots, and tools and spares storage 
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(2) Reliability and fault tolerance versus 

preparation for contingencies (redundancy, 
auxiliary propulsion, mission node 
havens, etc.) 

Reusability Tradeoffs 

(1) Reliability and fault tolerance versus in- 
space repair facility sophistication 

(2) Human-rated reliability for all missions 
versus reduced requirements for unmanned 
missions (The first and last few uses of 
the engines would carry greater risks. 
Coordinating these events with less criti- 
cal, unmanned missions could greatly 
reduce the degree of overall required 

re 1 i ab i 1 i t y . ) 

(3) Health-monitoring sophistication (includ- 
ing space exposure tolerance and monitor- 
ing) versus intentional underutilization 
of the engine 

(4) Monitoring sophistication to predict 
remaining life versus scheduled 
replacement 

Deep-Throttling Tradeoffs 

(1) Extended throttling control range versus 
other engine requirements (reliability, 
performance, and operational life) 

(2) Fast, stable t ime-rate-of-change for 
descent throttling versus different 
descent profiles or auxiliary propulsion 
compensation (It is also useful to know 
if prolonged use at any particular thrust 
setting is anticipated.) 

Product Evolution Tradeoffs 

CTP-ICHM modularity, flexibility, growth con- 
tingency, and data base archiving would have to be 
weighed against the development of several different 
engines and vehicles. 

Baseline CTP-ICHM Features 

Recognizing the range of tradeoff options, we 
now present a baseline set of qualitative CTP-ICHM 
requirements to provide a reference point for con- 
ducting tradeoff studies and for focusing technology 
programs. These baseline requirements assume the 
absence of extensive in-space maintenance or inspec- 
tion and assume that the entire engine is the line 
replaceable unit (LRU). A "minimum plus growth" 
approach is used to define this baseline in order to 
distinguish between enabling and enhancing technolo- 
gies. The rationality of these baseline definitions 
was checked with three major rocket engine contrac- 
tors during video conference discussions (video con- 
ference between Aerojet TechSystems' Expander Cycle 
Engine and Instrumentation group and NASA Lewis 
Research Center's Space Vehicle Propulsion Branch, 
Sacramento, CA, and Cleveland, OH, Dec. 20. 1989; 
video conference between Rockwell International, 
Rocketdyne Division's Expander Cycle Engine and 
Instrumentation group and NASA Lewis Research Cen- 
ter's Space Vehicle Propulsion Branch, Canoga Park, 
CA, and Cleveland, OH, Jan. 11, 1990; and video con- 
ference between United Technologies, Pratt & Whitney 
Division’s Expander Cycle Engine and Instrumentation 


group and NASA Lewis Research Center's Space Vehicle 
Propulsion Branch, West Palm Beach, CA, and 
Cleveland, OH, Jan. 19, 1990). 

CTP-ICHM Minimum Features 

Minimum" features are defined as features 
that are essential given the LTV and LEV mission 
requirements for man-rated reliability of a space- 
based, reusable, throttleable, expander-cycle 
engine. One minimal feature is that the system 
must be capable of expansion to incorporate the 
viable and useful growth features. The minimal 
CTP-ICHM features include 

(1) Closed- loop control during all engine 
modes (prestart, startup, steady state, 
throttling, and shutdown) 

(2) Basic expander-cycle operation including 
tank-head start and idle 

(3) Emergency shutdown control 

(4) 10:1 continuously variable throttling 

(5) Built-in automated prestart readiness 
check (based on engine sensors) 

(6) Automated post-shutdown engine check 
(based on engine sensors) 

(7) Space exposure tolerance and monitoring 

(8) Engine-out thrust compensation (gimbal- 
ling, and rapid, accurate thrust change) 

(9) Growth flexibility 
CTP-ICHM Growth Features 

The "growth" features represent those techno- 
logical abilities that are highly desirable but not 
essential. These features allow flexibility to 
accommodate the changing scope of mission duties, 
to incorporate new technologies which enhance 
mission capabilities, and to incorporate product 
improvements. These growth features include 

(1) Automated pre-mission inspection (which 
would assess the ability to complete the 
entire mission, in addition to the mini- 
mum prestart readiness check) 

(2) Real-time diagnostics during firing 

(3) Adaptive controls based on real-time 
diagnostics to optimize the choice of 
choice engine reliability, engine perfor- 
mance, or engine longevity 

(4) Flexibility to incorporate emerging tech- 
nologies as they become flight qualified 

(5) Oxidizer-rich operation control to take 
advantage of lunar-derived oxygen 

(6) Automated life prediction (based on sen- 
sor data) 

Inherent in the mission and technology trade- 
offs listed previously, is the uncertain distinc- 
tion between "enabling" and "enhancing" technology; 
hence, study results may shift the distinction 
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between minimum and growth features. In addition, 
if some of the minimum or growth features listed 
are found to be infeasible or prohibitively expen- 
sive, alternative mission options may be neces- 
sary. The results of the studies will also trans- 
late these features into quantitative design 
specif i cat ions . 

Technology Readiness Assessment 

Before tradeoff studies can effectively iden- 
tify optimum ICHM specifications, or mission, vehi- 
cle, or infrastructure features, more data on the 
cost and feasibility of ICHM technology are 
required. To provide those data, two rocket engine 
contractors were asked to assess the technology 
readiness and remaining development cost of a mini- 
mum ICHM system. These assessments were to be based 
on the contractors’ preliminary designs of the orbit 
transfer vehicle (OTV) rocket engines and on repre- 
sentative mission assumptions. These tasks are due 
to be completed in August 1990. The details of 
these tasks, reference technology, mission assump- 
tions, and preliminary results are described next. 

Assessment Goals 

The contractors' tasks are to (l) specify the 
minimum features of the OTV engine ICHM system, 

(2) identify the necessary system elements to pro- 
vide those features, (3) estimate the technology 
readiness of each system element, (4) estimate the 
remaining development cost to demonstrate the system 
in a simulated environment by 1996, and (5) estimate 
the technology readiness, cost, and benefit of 
including potential growth features. The rating 
scale for technology readiness is the same as that 
used by the NASA Office of Exploration for comparing 
technology options, and is listed in Table III. 

Technology Reference 

CTP technology is a continuation and refinement 
of the similar, but smaller scale, OTV rocket engine 
program in progress since the early 1980 ’ s.^ The 
original driving mission for the OTV was manned 
low-Earth orbit to geosynchronous orbit transfer 
(LE0-GE0), and the OTV engine was targeted to be a 
reusable, space-based cryogenic hydrogen-oxygen 
expander-cycle engine with 33 kN (7500 lb} thrust, a 
high-performance specific impulse of 485 sec, and a 
10:1 throttle ratio. Work progressed to the point 
of developing preliminary engine designs and testing 
some components. Although not identical to the CTP 
engine, the preliminary OTV engine designs provide 
specific hardware examples that allow for more real- 
istic technology assessments . 

Assessment Assumptions 

The mission assumptions for the OTV engine 
technology assessment are similar to the CTP 
requirements of human-rated reliability and continu- 
ously variable throttling. With respect to space 
basing, the assumptions were constrained to having 
no facilities for routine engine inspections and 
having the in-space LRU be the entire engine. These 
assumptions contrast other studies that assumed a 
more extensive space-based maintenance infrastruc- 
ture. 5 These contrasts should help highlight the 
impact and benefits of built-in engine inspection 
and whole-engine replacement. 


Prel iminary Resul ts 

One of the engine contractors has completed the 
first three subtasks - namely the identification of 
minimal features, system elements, and estimates of 
technology readiness for each element (Monthly Tech- 
nical Progress Reports for the Orbit Transfer Rocket 
Engine Technology Program. Reports 23772-M-80, 81, 
and 82," NASA Contract NAS3-23772, Task E.7, Aerojet 
TechSys terns, Sacramento, CA, Jan. -Mar. 1990.} These 
items are categorized according to the following 
engine operation cycles: 

(1) Preflight readiness assessment 

(2) Engine startup and tank-head idle 
control 

(3} Pumped- idle control 

(4) Main stage and engine throttling control 

(5) Engine shutdown control 

(6} Safety monitoring 

(7) Diagnostic monitoring 

(8) Condition monitoring 

(9) Post-flight condition 
assessment 

(10) Vehicle interfacing 

(11) Engine storage, removal, and replacement 

Because of the required reliability and minimal 
operation support for the engine, the contractor 
concluded that the minimal features should include 
real-time engine diagnostics to detect anomalies or 
off-nominal performance and adaptive control to pro- 
vide online system adjustments. These functions 
are necessarily performed by using engine parameter 
estimation, a real-time engine model, and redundant 
measurements derived from analysis of other 
parameters . 

The individual elements to provide these fea- 
tures cover the full span of estimated technology 7 
readiness, from level l to level 7 (Table III). 

The diagnostic software typically ranked level 2, 
the control software typically ranked level 3, the 
sensors predominately ranked either level 7 or 4, 
and the other hardware levels predominately ranked 
level 4 or 5 . The total ICHM system readiness was 
not ranked by the contractor, but it falls in the 
range of readiness level 2 or 3 because a full ICHM 
system breadboard has not yet been demonstrated in 
the laboratory. 

At the time of writing this paper, there were 
no available estimates of the remaining development 
cost to bring all the necessary elements and total 
system to readiness level 6 by 1996. 

Present and Future CTP- ICHM 
Technology Programs 

Focused research continues to advance CTP and 
ICHM technology. CTP programs include the Advanced 
Expander-Cycle Test Bed (AETB), generalized system 
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modeling, and deep- throt t 1 ing studies. The near- 
term ICHM activities include the previously 
described technology assessment tasks, automated 
prestart readiness assessments, space environment 
hazards survey, and ICHM system framework 
specification. 

Advanced Expander-Cyc le Te s t Bed 

The most noteworthy segment of CTP work is the 
Advanced Expander-Cyc le Test Bed (AETB) engine pro- 
gram. The AETB is a complete experimental engine 
system that is targeted to be delivered to the NASA 
Lewis Research Center in mid 1993. That engine 
will be used as the systems technology test bed 
and, later, as a system on which advanced technolo- 
gies (including ICHM) can reach readiness level 6 
(Table III), and thus be considered as technology 
ready for an engine development program. The infor- 
mation acquired from these activities will provide 
the technology data base for the development of the 
next generation of space engines. 

CTP Generalized System Modeling 

Engine system modeling is being explored for 
design performance verification analysis of cycle, 
throttling, and control options. This modeling 
will consist of steady-state and transient analysis 
and will be used to analyze cycle options and vari- 
ous engine control schemes. These models could 
also be used for failure modeling and to help train 
neural nets and expert system knowledge bases that 
might be used in a health-monitoring system. The 
exact configuration, software, and features of 
these models have not yet been chosen. 

CTP Throttling St udy 

Studies will assess the effects of and alterna- 
tives to 20:1 throttling of an expander-cycle 
engine and will perform parametric analysis to 
determine how deep throttling affects overall 
engine performance. 

Automated Prestart Readiness Methods 

A study is underway to define and evaluate var- 
ious methods of performing an automated prestart 
readiness check. These methods span a range of 
sophistication from actual test firing, to an 
entirely static checkout (no physical cycling of 
any components). The technology readiness and 
remaining development cost of these methods will be 
estimated. This information will be useful in 
tradeoff studies assessing the degree of space- 
based external inspection support versus built-in 
self- inspect ion. 

Space Environment Hazards Survey 

The variety of space hazards that, are likely 
to be encountered in Earth-Moon mission regimes are 
being surveyed. This information will be used to 
indicate which hazards will require attention in 
engine system designs and ICHM functions. Typical 
space hazards include space debris, monatomic 
oxygen, radiation, and thermal gradients. 

ICHM Framework Specification 

A system framework is being defined to 
determine the interaction of sensor data, monitor- 
ing functions, and control algorithms. 6 The frame- 


work will describe the different functions, 
algorithms, and component interactions (data and 
information flow) within the ICHM system. The 
implementation of this framework in a system archi- 
tecture is also planned. This architecture is a 
candidate for demonstration on the .AETB system. 


Concurrent Health Monitoring or Control 
Technology Programs 

Technology applicable to CTP-ICHM is being pur- 
sued in several other programs: the orbit transfer 
vehicle (OTV) , the Civil Space Technology Initia- 
tive, Earth to Orbit (CSTI-ETO), the Advanced 
Launch System (ALS), and aeronautical propulsion. 

The applicability of these other programs is limited 
by the degree of similarity to the CTP configura- 
tions (small size) and missions (space based, 
reusable, and continuously throttleable). These 
parallel efforts are summarized next. 

OTV Rocket Engine Technology 

The program most applicable to CTP is the OTV 
program. As described before, the OTV’s require a 
huraan-rated, reusable, space-based, 10:1 throttle- 
able, expander-cycle engine that is approximately 
the same size as CTP engines and has practically 
the same operational environment. Because of pro- 
grammatic constraints, the ICHM work on this engine 
has focused mainly on improving small, reliable sen- 
sors. 7-10 This sensor work is directly applicable 
to CTP and could also apply to other programs. 

ICHM system definitions were outlined, 3 and that 
work continues today in the form of the technology 
readiness assessments previously described. 

CSTI-ETO Technology 

The CSTI program is developing candidate 
health-monitoring methods For ETO engines such as 
the Space Shuttle Main Engine (SSME) ('ETO Propul- 
sion Program - FY90, Validation Program Tasks 
Descriptions and Schedules," and "ETO Propulsion 
Program - FY90, Technology Acquisition Tasks 
Descriptions and Schedules," NASA Headquarters, 

CODE RP, unpublished reports, Jan. 1990.) Because 
the SSME is currently in service, there is signifi- 
cant hardware test experience on which to base and 
evaluate health assessment methods. However, 
bec ause the mission envelope and hardware configura- 
tions of the SSME are different from those for CTP, 
the SSME work will not be readily transferable to 
CTP. The same general approaches and tools might 
be used, but they would have to be adapted to the 
specific configurations and mission constraints of 
the CTP-ICHM system. 

For example, the software work for the SSME 
has concentrated less on advanced control methods 
because the SSME is a flight-qualified design with 
limited flexibility to incorporate additional con- 
trol valves. The critical monitoring areas are 
also different; the SSME turbines encounter larger 
thermal transients, and the CTP engines have higher 
pump speeds. Miniaturization of sensors is less 
critical in. the SSME than in CTP. Also, many of the 
diagnostic tools such as expert system analysis and 
leak detection systems are designed for human-tended 
use in ground-based facilities and may not apply to 
automated systems for the vacuum of space. The rel- 
evant differences between the SSME and CTP systems 
are outlined in Table IV. 
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Advanced Launch System 


The ALS program is also making a substantial 
effort to develop controls and health-monitoring 
devices. The ALS is similar to the SSME with 
respect to the Earth- to-orbi t operational envelope. 
It is similar to CTP with respect to having minimal 
hardware experience and data bases. The sensor 
selection methodologies for ALS research and ALS 
investigations into processors for use in harsh 
environments are applicable to CTP-ICHM. 

Aeronautical Engine Systems 

The aircraft engine industry has a rich history 
in engine monitoring and control. It has developed 
a number of useful design, simulation, and mainte- 
nance tools based on extensive experience. It is 
also developing advanced control, detection, and 
diagnostic algorithms; advanced sensors; and fiber- 
optic cabling systems. 

. The differences between aeronautical engines 
and CTP engines are great, thus limiting the direct 
application of these systems. The general 
approaches such as system modularity and developing 
general purpose tools, however, may be applied to 
defining the CTP-ICHM framework and architecture. 
Advanced engine control methods and control and mon- 
itoring system design methods are the most applica- 
ble technologies. 

Recommended Future Work 

The challenges facing the development of ICHM 
technology for CTP can be categorized into four 
groups: system requirement tradeoffs, technology 
selection tradeoffs, emerging technologies, and 
technology demonstrations. System requirement 
tradeoffs refer to resolving the mission versus 
technology tradeoffs 1 i sted previously . Technology 
selection tradeoffs refer to resolving the best 
methods to satisfy ICHM requirements, including 
technology tradeoff studies, design tools, and test- 
ing tools. Emerging technologies refer to the con- 
tinued exploration of technologies that are likely 
to be useful to CTP-ICHM systems, such as miniatu- 
rized sensors and advanced software. Technology 
demonstrations refer to the actual use of emerging 
technologies in engine components and systems neces- 
sary to prove their viability for application in 
future engines. Tasks being considered or planned 
for each of these categories are outlined next. 

System Requirement Tradeoffs 

Further definition of CTP-ICHM requirements is 
needed to focus the technology development. This 
includes performing tradeoff analyses on the comple- 
mentary systems listed earlier. These tradeoff 
studies are also necessary to identify effects on 
mission, infrastructure, and vehicle design options. 
The results of the ICHM technology assessment tasks 
will support these tradeoff studies. Examples of 
such studies follow: 

(1) Vehicle, propulsion system, and engine 
performance tradeoffs to quantify system 
specifications, such as those listed in 
Table II, and to identify ICHM require- 
ments for vehicle designs 


(2) Autonomous monitoring and fault 
accommodation versus spaced-based 
inspection and repair infrastructure 
tradeoffs will determine the optimum meth- 
ods for performing space-based readiness 
inspections and for responding to engine 
faults 

(3) Reliability and performance versus 
reusability tradeoffs 

(4) Vehicle, propulsion system, and engine 
interface tradeoffs to optimize the 
effectiveness of the vehicle and engine 
control and the monitoring hierarchy 

(5) Space hazards assessments to address 
monitoring and degradation tolerance of 
anticipated critical hazards 

Technology Selection Tradeoffs 

(1) On-board versus ground-based diagnostic 
analysis 

(2) Direct-sensing versus inferred conditions 

(3) Sensor reliability versus redundancy 
CTP-ICHM Design Tools 

In order to define and evaluate ICHM frame- 
works and architectures, a number of analysis tools 
are required in addition to engine design models. 
Examples of these tools follow: 

(1) Modular, steady-state engine simula- 
tion, where each component and subsystem 
is programmed as a separate subroutine so 
that a number of different engine configu- 
rations can be modeled 

(2) Dynamic engine simulation for analyzing 
various nominal control and monitoring 
methods, including throttling control 

(3) Failure and degradation simulation that 
can be linked to the dynamic engine simu- 
lation to analyze fault response control 
and monitoring methods 

(4) Real-time dynamic engine model for 
parallel use with the test bed engine 

Data Base Management Tools 

AETB and focused technology testing will gener- 
ate much data that must be analyzed between tests 
and made available for more detailed analysis. A 
dedicated data acquisition, analysis, and archiving 
system will be needed to accompany the tests to 
ensure continuity of data recording and access 
throughout the engine use period. 

In addition to the data base for testing, an 
archiving system may be required to track the design 
evolution of the CTP engines. This archiving system 
will make it possible to knowledgeably refine these 
engines for the evolving mission applications pre- 
ently being considered, such as Mars transfer and 
ascent and descent propulsion. 
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Emerging Technology Tasks 

Because of their potential benefits, several 
technologies deserve continued attention so that 
they can be used in future engines. 

Hardware . Some examples of useful hardware 
technology follow: 

(1) Miniaturized sensors for use in the rela- 
tively small CTP hardware, such as shaft 
dynamic sensors and bearing def lectometers 

(2) External sensor systems, such as plume 
spectrometers and optical or distributed 
propellant leak-detection sensors 

(3) Fast cryogenic valves to provide control 

(4) Alternative data harnesses, such as fiber 
optics, to provide fast data-rate capabil- 
ities for advanced data processing 

(5) Mass data storage devices to contain the 
on-board engine analysis programs and sen- 
sor data 

Software . Various software tools could enable 
or enhance ICHM, and are likely to be contained 
within specific architectural elements. These 
tools are likely to include qualitative reasoning, 
parameter estimation, linear and nonlinear regres- 
sion, Kalman filtering, neural networks, and expert 
systems . 

Technology Demonstration Tasks 

Before any of the emerging technologies can be 
considered for inclusion in the next generation 
of spacecraft engines, they must be demonstrated 
with an engine system in a simulated environment - 
technology level 6. The approximate deadline for 
level 6 is 1996 or 1997. Therefore, the emerging 
technologies should be demonstrated as soon as pos- 
sible so that testing of the full CTP-ICHM system 
is not delayed. Some sample demonstration tasks 
fol low : 

Monitoring Software . The emerging software 
techniques should be demonstrated on actual compo- 
nent test stands. This may take the form of aug- 
menting a turbopump seal test stand with a parallel 
health-monitoring and analysis system intended to 
provide real-time fault diagnostics. 

Advanced Sensors . Emerging sensor technology 
should be used in rocket engine component tests to 
demonstrate the sensors' capability to operate in 
actual rocket engine environments. 

ICHM systems and subsystems . Again, in the con- 
text of component test stands, integration of 
advanced software, sensors, and control effectors 
should be demonstrated successfully before a full 
ICHM system is demonstrated in AETB testing. 

Concluding Remarks 

Because future Chemical Transfer Propulsion 
(CTP) engines must be human rated, continuously 
throttleable, reusable, and space based; they must 


have more sophisticated Integrated Controls and 
Health Monitoring (ICHM) systems than existing 
flight-proven technology. The exact correlation 
between ICHM features and mission, infrastructure, 
and vehicle specifications is still uncertain. To 
help define these correlations, this paper examined 
the association between mission plans and ICHM func- 
tional requirements, and described ongoing work to 
assess the readiness and remaining development cost 
of the supporting technology. 

The main ICHM features are driven by space bas- 
ing, reusability, throttling, and product evolution. 
These features include closed-loop control during 
all phases of engine operation (tank-head start, 
idle, steady-state thrusting, throttling, and shut- 
off) and include emergency shutoff fault response, 
10:1 continuously variable throttling, built-in pre- 
start readiness checkout, automated post-shutoff 
diagnostics, long-duration space-exposure monitoring 
and tolerance, and built-in system growth potential. 

.Anticipated growth features for the ICHM sys- 
tem include the ability to perform automated pre- 
mission readiness checkouts; incorporate emerging 
technologies; incorporate changes for alternative 
mission duties; perform real-time engine diagnos- 
tics; use real-time engine diagnostics for adaptive 
control to optimize engine reliability, performance, 
or longevity; and estimate the remaining life of 
the engine. 

Technology assessments and tradeoff analyses 
must be performed to provide the optimum mix of 
ICHM features and mission options. Two primary 
examples include engine control accuracy versus 
substantial auxiliary propulsion and engine-out 
throttling capacity versus substantial auxiliary 
propulsion or reduced payload masses. To provide 
these features, various technologies (such as 
advanced sensors, valves, and monitoring and con- 
trol software) must be developed and tested in sys- 
tem demonstrations. 
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TABLE I. - PRELIMINARY CHEMICAL TRANSFER PROPULSION REQUIREMENTS 


Requirements 

Lunar Transfer Vehicle 

Lunar Excursion Vehicle 

Engine cycle 

Cryogenic hydrogen- 

oxygen expander cycle 

Cryogenic hydrogen- 

oxygen expander cycle 

Rel iabi 1 i ty 
requi rement 

Human rated, fail 

operational, fail safe 

Human rated , fail 

operational, fail safe 

Operational environment 

Space based 

Space based 

Flights without major 
service 

5 (including 30 starts) 

5 (including 30 starts) 

Duration in space 

Unknown 

Unknown 

Number of engines in 
cluster 

3 or 4 

4 

Maximum thrust per 
engine, kN (lb) 

90 to 222 

(20 to 50xl0 3 ) 
most likely 111 
(25xl0 3 ) 

53 to 111 

(12 to 25xl0 3 ) 
most likely 111 
(25xl0 3 ) 

Throt 1 1 ing 

Tank-head idle 
Pumped idle 
Full thrust 

Continuous range: 

100 to 10 percent min 
100 to 5 percent max 

Maximum specific 
impulse, sec, I S p 

480 

465 

Vehicle compatibility 

Ae rob rake 

Short nozzle 
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TABLE II. - CHEMICAL TRANSFER PROPULSION - INTEGRATED CONTROLS AND 
HEALTH MONITORING (CTP-ICHM) SPECIFICATIONS 


Throt 1 1 in g control 

Accuracy of thrust level 

Time response for thrust changes 

Minimum to full thrust 

Full thrust to zero thrust 

Incremental changes 

Sustained thrust levels (level versus duration) . . . 

Continuously variable range ( ful 1 :minimum) 

Gimbal control 

Accuracy 

Time response 

Range , deg 

Nozzle control 

Number of extend-retract cycles ........... 

Time response • • 

Mixture ratio control (oxygen : hydrogen mass flow ratio) 

Accuracy 

MR versus thrust level requirement 

Time response for MR changes 

Sustained levels ...... 

Continuously variable range . 

Single engine reliability 

Probabi 1 i ty of catastrophic failure 

Probability of fail-safe failure 

Probability of fail-operational failure 

Single engine reusability without major service 

Mean time to fail-safe failure 

Mean time to fail-operational failure 

Maximum operational life, flights (starts) 

Space exposure duration 

Duration at low-Earth orbit 

Duration at geosynchronous orbit 

Duration at low lunar orbit 

Duration at lunar surface • • 

Maximum operational life, yr . , . 

ICHM hardware constraints 

System weight ............. 

Size 


(a) 

- (a) 

(a) 

(a) 

(a) 

10:1 (20:1 max) 

...... (a) 

(a) 

6 to 8 (12 max) 

(a) 

(a) 

(a) 

(a) 

(a) 

6:1 

4.5:1 to 7.0:1 

...... (a) 

(a) 

(a) 

(a) 

(a) 

.... 5 (30) 

...... (a) 

(a) 

(a) 

(a) 


■ (a) 

• (a) 


a To be determined. 


TABLE III. - TECHNOLOGY READINESS SCALE 


Level 1 - Basic principles observed and reported 

Level 2 - Technology concept and application formulated 

Level 3 - Analytical and experimental critical function and/or proof of 


concept 

Level 4 - Component and/or breadboard validation in laboratory 
Level 5 - Component and/or breadboard demonstration in relevant 
environment 

Level 6 - System validation model demonstrated in simulated environment 
Level 7 - System validation model demonstrated in space 
Level 8 - Flight-qualified system 
Level 9 - Flight-proven system 
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TABLE IV. - CRITICAL DIFFERENCES BETWEEN CHEMICAL TRANSFER PROPULSION 


AND SPACE SHUTTLE MAIN ENGINE 


Requirements 

Chemical transfer propulsion 

Space Shuttle Main Engine 

Engine cycle 

Cryogenic hyrogen-oxygen 
expander cycle 

Staged combustion 

Operational data 
bases 

No engine system data 

Significant data bases 

Design flexibility 

Requires new technology 

Limited control options 

Diameter of 
turbopump, cm 

-10 

-70 

Pump speeds , rprn 

High (190 000 max) 

Moderate (34 000) 

Substance that 
drives turbine 

Warm fuel or oxidizer 

Hot combustion gases 

Operational 

maintenance 

No capability anticipated 
for in-space repair 

Manually inspected and 
repaired between 
missions 

Mission prof i le 

Variable 

Always Earth to orbit 

Duration (and type) 
of space exposure 

Years (low-Earth orbit, 
geosynchronous orbit, 
and lunar orbit) 

Weeks (low-Earth orbit) 

Thrott 1 ing 

Continuous, up and down 

Preprogrammed, discrete 
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